Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File:                     97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier:          bNoWN0titVD1N0ocivBXQg9OqhMU0tY/iFIlt8h5LYo=
Subject key identifier:   9D:4E:4E:A3:1E:29:BD:5B:63:FF:ED:0E:EC:20:1B:28:96:BB:F2:44
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer:       /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial:       01992C34DCEB75B12FBB705BF05E89D70768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number:          036C
Signing time:             Tue 09 Sep 2025 02:01:25 +0000
Manifest this update:     Tue 09 Sep 2025 02:01:25 +0000
Manifest next update:     Wed 10 Sep 2025 02:01:25 +0000
Files and hashes:         1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: EhtyTemiXZYaxBMd8kTwvegR3eXTCeeDlwd3FTxNUNI=)
                          2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 02:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:34:dc:eb:75:b1:2f:bb:70:5b:f0:5e:89:d7:07:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
        Validity
            Not Before: Sep  9 02:01:25 2025 GMT
            Not After : Sep 10 02:01:25 2025 GMT
        Subject: CN=9d4e4ea31e29bd5b63ffed0eec201b2896bbf244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:15:78:93:0d:f7:fe:f8:cc:d5:4e:5b:a2:
                    4f:fa:ff:d2:ec:68:ae:8f:7d:2e:81:86:d2:c1:61:
                    57:d0:d8:03:87:2c:f5:11:36:66:1a:c1:94:6f:83:
                    14:83:9e:12:fb:0d:1b:8c:c7:78:0c:f3:4a:0f:ed:
                    78:b1:87:bc:5b:64:38:13:8e:ca:a4:69:b1:18:88:
                    c2:fa:a5:2d:78:01:71:12:1f:bb:7b:c0:09:cc:6d:
                    09:d7:ab:8a:50:01:e9:51:f7:fc:20:fb:63:c4:cb:
                    ca:4d:c3:32:77:92:16:13:41:ec:7c:8f:8c:a5:38:
                    a5:c8:48:0f:97:bc:90:65:35:91:a0:14:7f:0e:e5:
                    32:19:b9:06:0d:ae:93:e6:92:10:b9:1a:d0:8f:7a:
                    9a:f4:d4:af:01:4a:af:36:e0:b9:cb:a5:d8:06:86:
                    39:30:f8:36:27:e4:61:de:e2:d5:7b:ef:cd:05:d2:
                    6b:e2:7a:d0:f0:b4:55:1f:eb:ff:0d:82:3b:97:d8:
                    bf:25:49:ce:98:e9:82:de:d8:5a:25:63:c4:d0:6a:
                    b2:91:b3:61:15:f5:ee:a5:a9:89:8d:e3:4d:e0:17:
                    e7:79:60:3f:65:1e:08:a3:9f:68:32:b1:a4:b7:2c:
                    ef:c2:ef:b0:d7:a0:41:3d:f1:ce:82:ec:9e:2a:bc:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:4E:A3:1E:29:BD:5B:63:FF:ED:0E:EC:20:1B:28:96:BB:F2:44
            X509v3 Authority Key Identifier:
                keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:df:d3:5e:1e:04:b0:97:42:2d:1a:76:bf:28:f9:df:7c:9f:
         3c:18:58:ce:c4:16:7b:01:d5:bf:32:7f:cf:e7:75:99:27:fe:
         9d:39:8c:a2:ba:31:a9:a1:de:1f:6d:92:7d:82:aa:91:21:5f:
         39:57:bb:f5:85:25:3f:6d:1e:5a:d8:f8:c9:5c:2c:bb:67:7c:
         11:09:0d:46:88:11:ec:43:b4:7f:a1:5b:06:aa:50:0b:f6:ec:
         b9:3c:37:52:1c:57:a3:b9:75:17:8c:ce:1f:d3:60:57:2d:b5:
         ea:26:66:83:1d:53:94:f3:2f:8e:38:81:b6:e0:fc:97:8f:47:
         52:64:a8:f7:de:c0:bd:44:cf:27:db:b6:fb:ec:18:3b:55:c5:
         e4:dd:a6:d1:66:8d:9d:08:e7:20:29:a3:2e:a8:55:9c:c5:5a:
         de:d0:68:fe:29:cd:f3:50:b2:87:d8:96:22:e3:26:28:c0:3e:
         f1:29:c3:9d:49:9a:e4:21:57:00:fb:c4:52:2e:fc:51:a5:e7:
         5a:9e:82:5f:2f:15:7b:81:16:45:72:27:44:a1:61:00:f1:1b:
         f6:2c:2f:6c:66:bb:0a:b3:0c:a6:f0:f1:0e:b7:37:cb:f3:12:
         23:60:d9:9f:5e:88:73:6d:b6:a0:1d:ae:8c:ee:f6:02:75:da:
         b7:f3:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:16:48 2025 by rpki-client